Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5simcEsN88kSURv92182TE/989ZJWUiq2w64aqAoIDY=
Subject key identifier: 54:7E:FD:65:A6:F0:C3:61:85:73:1C:D6:EB:1C:C3:2E:E4:8B:A4:2B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 20935C3D7CCB4DF2687AB4D47BFF4DED3BBCFB7C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Jul 2023 09:30:13 +0000
ROA not before: Mon 03 Jul 2023 09:25:13 +0000
ROA not after: Mon 01 Jul 2024 09:30:13 +0000
asID: 834
IP address blocks: 93.127.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:93:5c:3d:7c:cb:4d:f2:68:7a:b4:d4:7b:ff:4d:ed:3b:bc:fb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 3 09:25:13 2023 GMT
Not After : Jul 1 09:30:13 2024 GMT
Subject: CN=547EFD65A6F0C36185731CD6EB1CC32EE48BA42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:fc:54:9d:26:c2:60:b1:29:21:eb:fd:ba:
6d:cb:b9:82:da:17:fc:be:38:1c:0c:d9:e0:c0:db:
ae:fc:4e:81:8d:46:5d:27:52:3b:eb:a7:85:da:2f:
7e:92:94:c2:1d:c0:ba:de:df:79:78:e1:ba:d6:da:
04:b8:6f:a1:8f:be:ab:bd:60:6d:28:c5:02:4e:7f:
62:70:bc:71:80:a8:1a:b7:da:19:04:93:59:91:c8:
a8:22:de:1d:4f:ae:8c:9b:81:f9:c0:23:62:f8:61:
79:a1:02:c4:88:18:db:43:18:4a:3d:e3:3a:76:51:
b3:ba:9b:17:ca:1b:91:cc:f7:f9:93:eb:8b:57:0d:
1e:e4:e7:ce:44:60:b5:81:dd:84:c1:e0:7e:f0:45:
96:43:61:d2:2c:a0:13:29:a7:15:61:c9:19:bc:96:
74:3e:f5:c0:89:44:c3:b9:4a:55:1d:6d:66:ad:34:
8e:0e:0e:24:4c:64:56:8d:eb:03:b7:25:90:66:d9:
c0:ef:29:cf:5b:7c:7f:a7:e4:11:9e:7a:0a:b5:62:
18:0e:3f:07:0b:bc:83:63:bf:3a:43:a9:74:c2:37:
5d:b5:8e:ca:c2:bf:80:24:97:7a:b6:95:5f:3c:e9:
e3:d9:c3:5d:43:1a:4a:2d:d5:62:80:02:cf:e6:c6:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:FD:65:A6:F0:C3:61:85:73:1C:D6:EB:1C:C3:2E:E4:8B:A4:2B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:15:3d:7c:d5:41:1e:23:27:06:d6:87:c6:b0:f3:f2:6f:86:
1d:6b:22:97:22:8b:64:a6:65:5e:e7:97:95:7f:38:bc:8e:39:
2a:5e:ff:af:90:61:c1:1f:5d:c6:8c:b6:e3:c1:58:07:f8:79:
c9:b3:fd:38:bc:74:a8:c7:36:45:88:a6:93:72:57:5f:b7:34:
ad:d6:0b:9e:b2:7b:5e:ee:4d:20:c0:22:b7:d7:4f:d5:e9:cf:
a1:a7:ea:91:af:5a:30:47:20:f0:b4:c6:2a:c6:86:ff:92:f4:
49:02:83:dc:f0:bd:de:5e:ca:93:49:5f:ce:08:14:c8:7e:3d:
80:0e:3f:99:32:06:b6:12:33:84:07:d4:38:25:3c:25:cc:d7:
76:45:bb:7e:9e:ee:77:84:4c:1c:2b:61:cd:59:27:11:4e:ee:
86:8d:43:73:3b:69:98:e7:ae:73:56:23:c0:39:75:e0:06:d9:
1a:f3:4f:f8:26:33:ad:86:7c:d0:2f:ea:48:dd:9e:17:bc:9c:
5a:1c:8e:d6:f0:d8:19:43:f4:d7:d2:fa:40:71:84:24:3b:4a:
e9:70:66:85:f2:f9:cd:f8:6a:03:2d:91:4c:7d:97:d9:b9:b9:
d5:78:76:52:35:99:19:66:5f:8c:18:a4:8d:a7:72:da:ef:cd:
f4:4b:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:29 2025 by rpki-client